Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa
File:                     ed2de4cf-740a-331f-a504-905188603ad1.roa (raw, json)
Hash identifier:          7Kl2f3AoMFVd1EpZxvOfeFCDRlFGTyRXKBHLylyvaDE=
Subject key identifier:   95:76:83:EE:58:7C:27:8F:BA:43:83:0F:39:95:93:AC:ED:6D:B3:B5
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847F84F7E86F0419D0124042F80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa
Signing time:             Sat 23 Nov 2024 02:00:28 +0000
ROA not before:           Sat 23 Nov 2024 02:00:28 +0000
ROA not after:            Fri 21 Feb 2025 02:00:28 +0000
asID:                     397630
IP address blocks:        130.254.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:4f:7e:86:f0:41:9d:01:24:04:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 23 02:00:28 2024 GMT
            Not After : Feb 21 02:00:28 2025 GMT
        Subject: CN=2726cf9e-ab65-4e7d-881e-b10b18fc7584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5c:73:5d:49:20:d5:7f:ec:a7:61:56:95:89:
                    c0:ab:cf:49:11:da:f0:e1:0c:93:c5:41:1c:d3:bb:
                    5e:92:a4:28:b5:cf:b4:46:17:46:0b:ca:07:3e:a5:
                    c7:95:2a:80:92:1f:c7:b2:a8:6b:75:61:24:59:78:
                    65:92:ba:ac:ba:4f:3a:81:8f:c8:6f:d8:84:78:ba:
                    d7:c3:1f:74:52:83:8c:c3:b2:f5:4c:3f:14:43:56:
                    f2:c4:f8:88:8f:60:5d:db:e9:21:4a:57:1c:9a:66:
                    4b:13:b4:bb:ff:c3:f3:6a:4f:24:fc:aa:d4:97:06:
                    8d:ae:9e:85:ff:1b:44:56:87:c1:91:f0:c6:93:d9:
                    a0:3a:12:16:9b:a6:b3:58:28:4c:1b:56:a5:f7:5d:
                    2c:55:95:03:af:0d:c3:d9:7d:10:bb:31:b0:9a:11:
                    e1:55:16:33:dc:ca:68:a1:62:92:41:b6:ef:de:d7:
                    28:b9:4f:16:b3:22:b9:32:06:83:33:8e:40:b0:ea:
                    d5:7f:ed:29:bf:9d:ee:5e:82:4e:64:03:9e:3c:de:
                    d9:97:37:53:5a:f7:8a:e4:c8:b8:28:ac:38:a7:b4:
                    5a:f2:e8:77:c4:1b:9b:08:cd:e3:4c:63:e1:1e:1a:
                    d2:e3:31:5d:ae:56:31:43:a6:58:37:ee:36:d5:b0:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:76:83:EE:58:7C:27:8F:BA:43:83:0F:39:95:93:AC:ED:6D:B3:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a9:82:56:79:07:fa:ce:f5:d3:cb:f1:59:45:d9:81:69:d7:
         0c:1a:67:a6:92:b8:da:a5:10:9d:aa:60:77:c8:e9:ea:a6:a2:
         82:bf:21:5e:53:c7:b9:20:1e:63:2f:e4:17:a8:f1:be:4e:8e:
         f4:f9:ad:d2:0b:16:28:38:b1:7f:52:27:7c:6d:df:f4:d8:c2:
         8f:ad:3e:b1:b7:29:e2:7a:1f:ea:e0:5f:dc:a2:84:58:25:10:
         48:08:a4:9c:a5:e8:6d:e4:95:68:8c:9e:93:0f:7a:02:2f:a5:
         7c:eb:a9:72:e1:b3:d4:42:a6:f8:84:e4:10:ec:e2:f1:0b:7d:
         0f:64:96:76:15:73:82:7a:ba:68:b1:b2:18:af:e6:90:b6:7a:
         4a:43:1a:cf:c2:5b:a7:30:20:9f:63:43:71:6b:49:5e:21:bd:
         94:38:ae:bd:18:88:f8:dd:16:5a:12:df:63:2e:33:5a:ec:b8:
         61:1f:35:b0:b4:e3:8c:07:7b:a0:0b:e4:f0:43:f8:16:86:c2:
         7c:80:46:16:91:77:7d:6a:4b:e6:3c:1a:76:0c:63:62:f9:63:
         75:08:69:13:ee:9d:92:12:20:04:cc:ef:aa:50:ac:a8:f1:38:
         6d:66:c4:3e:0f:d1:02:70:fc:50:48:bd:48:37:c7:52:8f:5b:
         cf:e0:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:46 2024 by rpki-client on console-fra.rpki-client.org